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DETAILED ACTION 
Continued Examination Under 37 CFR LI 14 

1 . A request for continued examination under 37 CFR 1.114 including the fee set forth in 37 
CFR 1.17(e), was filed in this application after final rejection on 30-August-2005. Since this 
application is eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 
CFR 1 .17(e) has been timely paid, the finality of the previous Office action has been withdrawn 
pursuant to 37 CFR 1.1 14. Applicant's submission filed on 21-July-2005 has been entered. 

Remarks 

2. In response to communications filed on 21-July-2005 and 30-August-2005, claims 1, 7, 
10, 13, 28, 37, 40, 55, 58, 65, 68, and 89 have been amended, and claims 85-87 have been 
canceled. Claims 1-23, 25-50, 52-78, 80-84, and 88-90 are presently pending in the application. 

Claim Rejections - 35 USC §112 

3. The following is a quotation of the first paragraph of 35 U.S. C. 112: 

The specification shall contain a written description of the . invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 
contemplated by the inventor of carrying out his invention. 

4. Claims 1-23, 26-27, 28-50, 53-54, 55-78, 81-84 are rejected under 35 U.S.C. 1 12, first 
paragraph, as failing to comply with the written description requirement. The claim(s) contains 
subject matter which was not described in the specification in such a way as to reasonably 
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convey to one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. 

Claims 1, 28, and 55 are rejected because the limitation "a current role position of the 
user" fails to comply with the written description requirement. The specification does not 
describe what is meant by "a current role position" or how it would be different from a previous 
role position or a future role position. For the purpose of examining it is assumed that the 
applicant meant "a current role". 

Claims 2-23 and 26-27 are rejected for being dependent on rejected independent claim 1. 

Claims 29-50 and 53-54 are rejected for being dependent on rejected independent claim 

28. 

Claims 56-78 and 81-84 are rejected for being dependent on rejected independent claim 

55. 

Claim Rejections - 35 JJSC § 103 

5. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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6. Claims 1-4, 10-11, 17, 20-22, 28-31, 37-38, 44, 47-49, 55-57, 59, 77, and 83 rejected 
under 35 U.S.C. 103(a) as being unpatentable over Dedrick (U.S. patent No. 5,710,884) in view 
of Arlein et al (U.S. patent No. 2002/0133500 Al). 

As to claim 1, Dedrick teaches a method of managing meta data using a central repository 
at a central repository subsystem, the central repository being accessible by a computing device 
through a communications network (see abstract), the method comprising the steps of: 

connecting to the central repository through the communications network based on a user 
input (see column 20, lines 4-21); 

updating a local repository of the computing device with at least one segment from the 
central repository that is associated with the user to produce a meta data collection associated 
with the user (see column 20, lines 22-29); and 

utilizing, by the computing device, the meta data collection during a current user session 
at the computing device to assist the user in using the computing device (see column 7, line 40 
through column 8, line 22), 

wherein the utilizing step comprises retrieving, from the metadata collection, metadata 
that would be most appropriate for each of different contexts of using the computing device (see 
column 7, line 40 through column 8, line 22). 

Dedrick does not teach metadata that would be most appropriate for each of different 
contexts of using the computing device, based on at least a current role of the user. 
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Arlein et al teaches this (see paragraph 0009 and see paragraph 0032). Therefore, it 
would have been obvious to a person having ordinary skill in the art at the time the invention was 
made to have modified Dedrick by the teachings of Arlein et al. because the teachings would 
customize the content of the user based on the user's activities while preserving privacy of the 
users (see Arlein et al . paragraph 0009). 

As to claims 2, 29, and 56, Dedrick as modified, teaches further comprising the step of: 
uploading any new segment from the computing device to the central repository at a 
predetermined time (see Dedrick , column 20, lines 26-29). 

As to claims 3, 30, and 57, Dedrick as modified, teaches further comprising the step of: 
incrementally uploading any new meta data generated during the current user session 
from the computing device to the central repository (see Dedrick , column 20, lines 26-29). 

As to claims 4, 3 1, and 59, Dedrick as modified, teaches wherein the connecting step 
comprises: 

receiving, by the central repository subsystem, authentication information from the user 
(see Dedrick , column 20, lines 10-15); 

verifying validity of the authentication information (see Dedrick , column 20, lines 14- 
17); and 
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notifying the computing device that the user has proper authority to access the central 
repository if the authentication information is verified as valid (see Dedrick . column 20, lines 20- 
24). 

As to claims 10 and 37, Dedrick as modified, teaches wherein the retrieving step is 
performed using heuristics algorithms (see Dedrick . column 7, line 40 through column 8, line 
12); and the utilizing step further comprises applying the retrieved meta data in each of the 
different contexts (see Dedrick , column 7, lines 40-52). 

As to claims 1 1 and 38, Dedrick as modified, teaches wherein the current context 
comprises at least one of the following: opening a web page, filling in a computer form, filling in 
a password-changing form, providing a certificate, opening a computer file, processing a 
computer file, or executing an application program (see Dedrick . column 7, line 40 through 
column 8, line 23). 

As to claims 17 and 44, Dedrick as modified, teaches wherein the current context is for 
filling in a computer form, and the applying step comprises: automatically filling in the computer 
form with said most appropriate meta data (see Dedrick . column 8, lines 13-22). 

As to claims 20 and 47, Dedrick as modified, teaches wherein the utilizing step 
comprises: 
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formulating search requirements based on a current context of using the computing 
device; and executing a search based on the search requirements using the heuristics algorithms 
(see Dedrick , column 7, line 9 through column 8, line 31). 

As to claims 21 and 48, Dedrick as modified, teaches wherein the search requirements 
specify weighted properties of the current context of using the computing device (see Dedrick , 
column 7, line 9 through column 8, line 3 1). 

As to claims 22 and 49, Dedrick as modified, teaches further comprising the step of: 
providing a graphical user interface (GUI) for allowing the user to organize the meta data 
collection (see Dedrick , column 7, lines 53-64 and see column 8, lines 23-31). 

As to claim 28, Dedrick as modified, teaches a computer program product embodied on 
computer readable medium readable by at least one of a computing device and a central 
repository subsystem, for managing meta data using a central repository at the central repository 
subsystem, the central repository being accessible by the computing device through a 
communication network (see abstract), the computer program product comprising: 

computer executable code configured to connect, through the communications network, 
to the central repository based on a user input (see column 20, lines 4-21); 
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computer executable code configured to update a local repository of the computing 
device with at least one segment from the central repository that is associated with the user to 
produce a meta data collection associated with the user (see column 20, lines 22-29); and 

computer executable code configured to utilize, by the computing device, the meta data 
collection during a current user session at the computing device to assist the user in using the 
computing device (see column 7, line 40 through column 8, line 22), 

wherein the computer executable code configured to utilize comprises computer 
executable code configured to retrieve, from the meta data collection, meta data that would be 
most appropriate for each of different context of using the computer device, (see column 7, line 
40 through column 8, line 22). 

Dedrick does not teach meta data that would be most appropriate for each of different 
context of using the computer device, based on at least a current role of the user. 

Arlein et al. teaches this (see paragraph 0009 and see paragraph 0032). Therefore, it 
would have been obvious to a person having ordinary skill in the art at the time the invention was 
made to have modified Dedrick by the teachings of Arlein et al. because the teachings would 
customize the content of the user based on the user's activities while preserving privacy of the 
users (see Arlein et al . paragraph 0009). 



As to claim 55, Dedrick teaches a system for managing meta data in a secure manner (see 
abstract), the system comprising: 
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a central repository subsystem comprising a central repository for storing a plurality of 
segments associated with a user in a collection order (see column 9, lines 57-65); and 

at least one computing device capable of communicating with the central repository 
subsystem through a communications network, the computing device comprising a local 
repository and being capable of connecting, through the communications network, to the central 
repository based on a user input (see column 20, lines 4-21), updating the local repository with at 
least one of the segments from the central repository to produce a meta data collection associated 
with the user (see column 20, lines 22-29), and utilizing the meta data collection during a current 
user session at the computing device to assist the user in using the computing device (see column 
7, line 40 through column 8, line 22), 

wherein the computer device retrieves, from the metd data collection, meta data that 
would be most appropriate for each of the different context of using the computer device, (see 
column 7, line 40 through column 8, line 22). 

Dedrick does not teach meta data that would be most appropriate for each of different 
context of using the computer device, based on at least a current role position of the user. 

Arlein et al. teaches this (see paragraph 0009 and see paragraph 0032). Therefore, it 
would have been obvious to a person having ordinary skill in the art at the time the invention was 
made to have modified Dedrick by the teachings of Arlein et al. because the teachings would 
customize the content of the user based on the user's activities while preserving privacy of the 
users (see Arlein et al. , paragraph 0009). 
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As to claim 77, Dedrick as modified, teaches further comprising: a meta data editor for 
allowing the user to organize the meta data collection, (see Dedrick . column 7, lines 53-64 and 
see column 8, lines 23-3 1). 

As to claim 83, Dedrick as modified, teaches wherein at least one of the central 
repository and the local repository is implemented using a network-attached storage (see 
Dedrick , column 3, lines 7-49). 

7. Claims 5-6, 32-33, and 60-61 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al) 
as applied to claims 1-4, 10-1 1, 17, 20-22, 28-3 1, 37-38, 44, 47-49, 55-57, 59, 77, and 83 above, 
and in further view of Nguyen (U.S. patent No. 5,638,448). 

As to claims 5, 32, and 60, Dedrick as modified, still does not teach wherein the 
authentication information comprises user identification, a pass phrase of the user, and an 
identifier for the central repository or a component at the central repository subsystem. 

Nguyen teaches secure communication sessions on a network (see abstract), in which he 
teaches wherein the authentication information comprises user identification, a pass phrase of the 
user, and an identifier for the central repository or a component at the central repository 
subsystem (see column 16, lines 13-33). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Nguyen 
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because the teachings would prevent the password from being transferred over the network and 
allow both the client and server to authenticate each other (see Nguyen , column 16, lines 13-16). 

As to claims 6, 33, and 61, Dedrick as modified, teaches wherein the verifying step 
comprises: determining a secret key represented as a hash of: the received user identification 
concatenated with a hash of the received identifier, concatenated with the received pass phrase; 
and comparing the secret key with a stored key associated with the user (see Nguyen , column 16, 
lines 13-33). 

8. Claims 7-9 and 34-36 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Arlein et al: (U.S. patent No. 2002/0133500 Al) 
as applied to claims 1-4, 10-1 1, 17, 20-22, 28-3 1, 37-38, 44, 47-49, 55-57, 59, 77, and 83 above, 
and in further view of Kim (U.S. patent No. 6,546,002 Bl). 

As to claims 7 and 34, Dedrick as modified, still does not teach wherein the updating step 
comprises: 

determining if the local repository is at a null state; 

first requesting the central repository subsystem to transmit any segment associated with 
the user that has not been applied to the computing device if the determining step indicates that 
the local repository is not at a null state; and 

second requesting the central repository subsystem to transmit all segments associated 
with the user if the determining step indicates that the local repository is at a null state. 
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Kim teaches using a mobile profile to dynamically access programs, URLs, telephone 
numbers, television channels, and radio stations (see abstract) in which he teaches wherein the 
updating step comprises: determining if the local repository is at a null state (see column 7, lines 
38-65); first requesting the central repository subsystem to transmit any segment associated with 
the user that has not been applied to the computing device if the determining step indicates that 
the local repository is not at a null state (see column 7, lines 52-65); and second requesting the 
central repository subsystem to transmit all segments associated with the user if the determining 
step indicates that the local repository is at a null state (see column 7, lines 44-51). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Kim 
because the teachings would synchronize data with the server if the profile was already on the 
client and copy the profile to the client if it was not already there (see Kim , column 7, lines 38- 
65). 

As to claims 8 and 35, Dedrick as modified, teaches wherein the updating step further 
comprises: 

receiving at least one segment from the central repository subsystem in response to said 
first requesting step (see Kim , column 7, lines 52-65); 

decrypting the at least one segment (see Dedrick , column 20, lines 21-29, where it is 
inherent that the encrypted information is decrypted when it gets to the local computer); and 

applying the decrypted at least one segment to the meta data collection to produce the 
meta data collection associated with the user (see Kim , column 7, lines 52-65). 
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As to claims 9 and 36, Dedrick as modified, teaches wherein the updating step further 
comprises: . 

receiving at least one segment from the central repository subsystem in response to said 
second requesting step (see Kim , column 7, lines 44-51); 

decrypting the at least one segment (see Dedrick . column 20, lines 21-29, where it is 
inherent that the encrypted information is decrypted when it gets to the local computer); and 

generating the meta data collection for the user using the decrypted at least one segment 
(see Dedrick , column 20, lines 23-25). 

9. Claims 12-16, and 39-43 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al) 
as applied to claims 1-4, 10-1 1, 17, 20-22, 28-31, 37-38, 44, 47-49, 55-57, 59, 77, and 83 above, 
and in further view of Bull et al. (U.S. patent No. 5,901,287). 

As to claims 12 and 39, Dedrick as modified, teaches wherein the utilizing step further 
comprises: 

continuously collecting meta data resulting from use of the computing device during the 
current user session at the computing device (see column 7, lines 40-52). 

Dedrick as modified, still does not teach the method further comprises: 

generating a new segment based on the collected meta data upon completion of 
the current user session; and 
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processing the new segment. 
Bull et al. teaches aggregation and synthesization of information (see abstract), in which 
he teaches the method further comprises: generating a new segment based on the collected meta 
data upon completion of the current user session; and processing the new segment (see column 4, 
lines 28-32). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Bull et al. 
because the teachings would allow updated information to be available the next time they use the 
system (see Bull et aL column 4, lines 28-33). 

As to claims 13 and 40 Dedrick as modified, teaches wherein the processing step 
includes: 

updating the meta data collection with the new segment (see Bull et aL column 4, lines 

28-33). 

As to claims 14 and 41, Dedrick as modified, teaches wherein the meta data comprises 
application data for being usable in an application executable on the computing device, and 
context data for identifying context in which said application data are used (see Dedrick , column 
7, line 40 through column 8, line 12), and wherein the utilizing step further comprises: 

determining statistical information associated with the meta data, the statistical 
information indicating relationships between the meta data, wherein the retrieving step is 
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performed in part based on the statistical information (see Dedrick, column 7, line 65 through 
column 8, line 12). 

As to claims 1 5 and 42, Dedrick as modified, teaches wherein the context data identify at 
least one of the following: user roles, uniform resource identifiers (URIs), file names, and/or 
form names pertaining to the application data (see Dedrick , column 5, lines 1-16). 

As to claims 16 and 43, Dedrick as modified, teaches wherein the application data 
comprise at least one of the following: page display setting data, file display setting data, user 
ID/password combinations, field values for computer forms, user's preference data, bookmarks, 
and certificates (see Dedrick , column 7, lines 40-52). 

10. Claims 18 and 45 are rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of ArieinetaL (U.S. patent No. 2002/0133500 Al) as 
applied to claims 1-4, 10-11, 17, 20-22, 28-31, 37-38, 44, 47-49, 55-57, 59, 77, and 83 above, 
and in further view of Mohan et al. (U.S. patent No. 6,505,230 Bl). 

As to claims 18 and 45, Dedrick as modified, still does not teach wherein, if the current 
context is for filling in a computer form, the utilizing step further comprises: 

retrieving, from the meta data collection, alternative meta data that are related to the 
current context of filling in the computer form; and 

presenting the alternative meta data to the user for the user's consideration. 
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Mohan et al. teaches a client-server independent intermediary system (see abstract), in 
which he teaches wherein, if the current context is for filling in a computer form, the utilizing 
step further includes: retrieving, from the meta data collection, alternative meta data that are 
related to the current context of filling in the computer form; and presenting the alternative meta 
data to the user for the user's consideration (see column 1 1, lines 7-13). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Mohan et 
al because the teachings would allow the user to choose to leave some items blank or fill in 
items that are not in the normally found in the user's profile without having to delete or fill in the 
items every time a particular form is filled out (see Mohan et al , column 1 1, lines 2-6). 

11. Claims 19 and 46 rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al) as 
applied to claims 1-4, 10-11, 17, 20-22, 28-31, 37-38, 44, 47-49, 55-57, 59, 77, and 83 above, 
and in further view of Chun et al. (U.S. patent No. 2002/0184527 Al). 

As to claims 19 and 46, Dedrick as modified, still does not teach wherein the current 
context is for filling in a password-changing computer form, and the retrieved meta data 
comprises a user identification and a password, and wherein the applying step comprises: 

presenting to the user the password in an obfuscated format; 

determining whether it is safe to present the actual password to the user; and 
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presenting the actual password in a non-obfuscated format when it is determined to be 
safe to present the actual password. 

Chun et al. teaches an intelligent data securing apparatus (see abstract), in which he 
teaches wherein the current context is for filling in a password-changing computer form, and the 
retrieved meta data comprises a user identification and a password, and wherein the applying 
step comprises: presenting to the user the password in an obfuscated format; determining 
whether it is safe to present the actual password to the user; and presenting the actual password 
in a non-obfuscated format when it is determined to be safe to present the actual password (see 
page 5, paragraph 0050). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Chun et al. 
because the teachings would give the user the ability to change passwords and retrieve forgotten 
passwords (see Chun et aL page 5, paragraph 0050). 

12. Claims 23, 50, and 78 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al) 
as applied to claims 1-4, 10-11, 17, 20-22, 28-31, 37-38, 44, 47-49, 55-57, 59, 77, and 83 above, 
and in further view of Nagahara et al. (U.S. patent No. 6,636,246 Bl). 



As to claims 23 and 50, Dedrick as modified, still does not teach wherein the GUI 
displays a graphical tool in a cylindrical configuration for organizing the meta data collection. 
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Nagahara et al. teaches wherein the GUI displays a graphical tool in a cylindrical 
configuration for organizing the meta data collection (see column 5, lines 18-33). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Nagahara 
et al. because the teachings would provide superior operability when making selections from a 
menu (see Nagahara et al , abstract). 

As to claim 78, Dedrick as modified, still does not teach wherein the meta data editor 
displays a graphical tool in a cylindrical configuration for organizing the meta data collection. 

Nagahara et al. teaches wherein the meta data editor displays a graphical tool in a 
cylindrical configuration for organizing the meta data collection (see column 5, lines 18-33). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Nagahara 
et al. because the teachings would provide superior operability when making selections from a 
menu (see Nagahara et al. , abstract). 

13. Claims 26, 53, 58, 65-66, 72, 75-76, and 81 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Dedrick (U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 
2002/0133500 Al) as applied to claims 1-4, 10-11, 17, 20-22, 28-31, 37-38, 44, 47-49, 5*5-57, 
59, 77, and 83 above, and in further view of "Net Security Standard from the Open Group Brings 
the Realization of High- Value E-Commerce for Everyone a Step Further". 
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As to claims 26 and 53, Dedrick as modified, above does not teach wherein the 
computing device implements a Common Data Security Architecture (CDSA), and the utilizing 
step is performed by a CDSA add-on module. 

"Net Security Standard from the Open Group Brings the Realization of High- Value E- 
Commerce for Everyone a Step Further" teaches wherein the computing device implements a 
Common Data Security Architecture (CDSA), and the utilizing step is performed by a CDSA 
add-on module (see page 1, paragraphs 1 and 2). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of "Net Security Standard from 
the Open Group Brings the Realization of High- Value E-Commerce for Everyone a Step 
Further" because the teachings would standardize the security protocol so it can more easily be 
implemented into multiple applications (see "Net Security Standard from the Open Group Brings 
the Realization of High- Value E-Commerce for Everyone a Step Further", page 1, paragraph 1). 

As to claim 58, Dedrick as modified, teaches wherein the computing device further 
comprises: 

a plurality of applications selectably executable on the computing device (see column 5, 
lines 52-67); 

a data repository module, provided as an add-in module to the security- service providing 
architecture, for utilizing the meta data collection to assist the user in using the computing device 
(see Figure 8, step 306); and 
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an encryption/decryption module for encryption any new segment to be transmitted to the 
central repository subsystem (see column 6, line 35 through column 7, line 8). 

Dedrick as modified, still does not teach a security-service providing architecture 
structure for selectively providing security-based services to at least one of the plurality of 
applications. 

"Net Security Standard from the Open Group Brings the Realization of High- Value E- 
Commerce for Everyone a Step Further" teaches a security-service providing architecture 
structure for selectively providing security-based services to at least one of the plurality of 
applications (see page 1, paragraphs 3-5). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of "Net 
Security Standard from the Open Group Brings the Realization of High- Value E-Commerce for 
Everyone a Step Further" because the teachings would standardize the security protocol so it can 
more easily be implemented into multiple applications (see "Net Security Standard from the 
Open Group Brings the Realization of High- Value E-Commerce for Everyone a Step Further", 
page 1, paragraph 1). 

As to claim 65, Dedrick as modified, teaches wherein the data repository module 
retrieves the most appropriate meta data using heuristics algorithms (see Dedrick . column 7, line 
40 through column 8, line 12), and transmits the retrieved meta data to an appropriate one of the 
applications which in turn applies the retrieved meta data in each of the different contexts (see 
Dedrick . column 7, lines 40-52). 
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As to claim 66, Dedrick as modified, teaches wherein the current context comprises at 
least one of the following: opening a web page, filling in a computer form, filling in a password- 
changing form, providing a certificate, opening a computer file, processing a computer file, or 
executing an application program (see Dedrick . column 7, lines 40 through column 8, line 23). 

As to claim 72, Dedrick as modified, teaches wherein the current context is for filling in a 
computer form, and said appropriate one of the applications automatically fills the computer 
form with said most appropriate meta data (see Dedrick , column 8, lines 13-22). 

As to claim 75, Dedrick as modified, teaches wherein the data repository module 
formulates search requirements based on a current context of using the computing device, and 
executes a search based on the search requirements using heuristics algorithms (see Dedrick . 
column 7, line 9 through column 8, line 3 1). 

As to claim 76, Dedrick as modified, teaches wherein the search requirements specify 
weighted properties of the current context of using the computing device (see Dedrick . column 7, 
line 9, through column 8, line 31). 

As to claim 81, Dedrick as modified, teaches wherein the computing device is configured 
in Common Data Security Architecture (CDSA), and the data repository module is an add-on 
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module to the CDSA configuration (see "Net Security Standard from the Open Group Brings the 
Realization of High- Value E-Commerce for Everyone a Step Further" page 1, paragraphs 1-2). 

14. Claims 27, 54, and 82 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al) 
as applied to claims 1-4, 10-1 1, 17, 20-22, 28-3 1, 37-38, 44, 47-49, 55-57, 59, 77, and 83 above, 
and in further view of Charisius et al. (U.S. patent publication No. 2002/0077842 Al). 

As to claims 27, 54, and 82, Dedrick as modified, still does not teach wherein the central 
repository subsystem is implemented using WebDAV protocols. 

Charisius et al. teaches wherein the central repository subsystem is implemented using 
WebDAV protocols (see page 1, paragraph 0010). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Charisius 
et al. because these teachings would allow multiple users to view the same workflow and project 
plans, provide persistent storage, monitor the progress of an activated project plan, and 
simultaneously create plans from the same workflow (see Charisius et al. . page 1, paragraph 
0010). 

15. Claims 62-64 are rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al), in 
further view of "Net Security Standard from the Open Group Brings the Realization of High- 
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Value E-Commerce for Everyone a Step Further" as applied to claims 26, 53, 58, 65-66, 72, 75- 
76, and 81 above, and in further view of Kim (U.S. patent No. 6,546,002 Bl). 

As to claim 62, Dedrick as modified, still does not teach wherein the data repository 
module determines if the local repository is at a null state, transmits a first request to the central 
repository subsystem to transmit any segment associated with the user that has not been applied 
to the computing device if the local repository is not at a null state, and transmits a second 
request to the central repository subsystem to transmit all segments associated with the user if the 
local repository is at a null state. 

Kim teaches wherein the data repository module determines if the local repository is at a 
null state (see column 7, lines 38-65), transmits a first request to the central repository subsystem 
to transmit any segment associated with the user that has not been applied to the computing 
device if the local repository is not at a null state (see column 7, lines 52-65), and transmits a 
second request to the central repository subsystem to transmit all segments associated with the 
user if the local repository is at a null state (see column 7, lines 44-51). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified, by the teachings of Kim because the 
teachings would synchronize data with the server if the profile was already on the client and 
copy the profile to the client if it was not already there (see Kim , column 7, lines 38-65). 



As to claim 63, Dedrick as modified, teaches wherein the encryption/decryption module 
receives at least one segment from the central repository subsystem in response tq said first 
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request (see Kim , column 7, lines 52-65), and decrypts the at least one segment (see Dedrick , 
column 20, lines 21-29, where it is inherent that the encrypted information is decrypted when it 
gets to the local computer), and wherein the data repository module applies the decrypted at least 
one segment to the meta data collection to produce the meta data collection associated with the 
user (see Kim , column 7, lines 52-65). 

As to claim 64, Dedrick as modified, teaches wherein the encryption/decryption module 
receives at least one segment from the central repository subsystem in response to said second 
request (see Kim , column 7, lines 44-51), and decrypts the at least one segment (see Dedrick , 
column 20, lines 21-29, where it is inherent that the encrypted information is decrypted when it 
gets to the local computer), and wherein the data repository module generates the meta data 
collection for the user using the decrypted at least one segment (see Dedrick , column 20, lines 
23-25). 

16. Claims 67-71 are rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al), in 
further view of "Net Security Standard from the Open Group Brings the Realization of High- 
Value E-Commerce for Everyone a Step Further" as applied to claims 26, 53, 58, 65-66, 72, 75- 
76, and 81 above, and in further view of Bull et al. (U.S. patent No. 5,901,287). 
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As to claim 67, Dedrick as modified, teaches wherein the data repository module 
continuously collects meta data resulting from use of the computing device during the current 
user session at the computing device (see Dedrick . column 7, lines 40-52). 

Dedrick as modified, still does not teach generates a new segment based on the collected 
meta data upon completion of the current user session. 

Bull et al. teaches generates a new segment based on the collected meta data upon 
completion of the current user session (see column 4, lines 28-32). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Bull et al. 
because the teachings would allow updated information to be available the next time they use the 
system (see Bull et al. , column 4, lines 28-33). 

As to claim 68, Dedrick as modified, teaches wherein the data repository module updates 
the meta data collection with the new segment (see Bull et al. . column 4, lines 28-33. 

As to claim 69, Dedrick as modified, teaches wherein the meta data comprises 
application data for being usable in an application executable on the computing device, and 
context data for identifying context in which said application data are used (see Dedrick . column 
7, line 40 through column 8, line 12), and wherein the data repository module determines 
statistical information associated with the meta data and retrieves said appropriate meta data 
based on the statistical information, the statistical information indicating relationships between 
the meta data (see Dedrick . column 7, line 65 through column 8, line 12). 
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As to claim 70, Dedrick as modified, teaches wherein the context data identify at least 
one of the following: user roles, uniform resource identifiers (URIs), file names, and/or form 
names pertaining to the application data (see Dedrick . column 5, lines 1-16). 

As to claim 71, Dedrick as modified, teaches wherein the application data comprises at 
. least one of the following: page display setting data, file display setting data, user ID/password 
combinations, field values for computer forms, user's preference data, bookmarks, and 
certificates (see Dedrick , column 7, lines 40-52). 

17. Claim 73 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick (U.S. 
patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al), in further 
view of "Net Security Standard from the Open Group Brings the Realization of High- Value E- 
Commerce for Everyone a Step Further" as applied to claims 26, 53, 58, 65-66, 72, 75-76, and 
81 above, and further in view of Mohan et al. (U.S. patent No. 6,505,230 Bl). 

As to claim 73, Dedrick as modified, does not teach wherein, if the current context is for 
filling in a computer form, the data repository module retrieves, from the meta data collection, 
alternative meta data that are related to the current context of filling in the computer form, and 
transmits the alternative meta data to said appropriate one of the applications which in turn 
presents the alternative meta data to the user for the user's consideration. 



Application/Control Number: 1 0/05 1,951 Page 27 

Art Unit: 2164 

Mohan et al. teaches wherein, if the current context is for filling in a computer form, the 
data repository module retrieves, from the meta data collection, alternative meta data that are 
related to the current context of filling in the computer form, and transmits the alternative meta 
data to said appropriate one of the applications which in turn presents the alternative meta data to 
the user for the user's consideration (see column 1 1, lines 7-13). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Mohan et 
aL because the teachings would allow the user to choose to leave some items blank or fill in 
items that are not in the normally found in the user's profile without having to delete or fill in the 
items every time a particular form is filled out (see Mohan et al. , column 1 1, lines 2-6). 

18. Claim 74 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick (U.S. 
patent No. 5,710,884) in view of Arlein et al. (U.S. patent No. 2002/0133500 Al), in further 
view of "Net Security Standard from the Open Group Brings the Realization of High- Value E- 
Commerce for Everyone a Step Further" as applied to claims 26, 53, 58, 65-66, 72, 75-76, and 
81 above, and in further view of Chun et al. (U.S. patent No. 2002/0184527 Al). 

As to claim 74, Dedrick as modified, still does not teach wherein the current context is 
for filling in a password-changing computer form, and the retrieved meta data includes a user 
identification and a password, and wherein the data repository module controls said appropriate 
one of the applications to present to the user the password in an obfuscated format, determines 
whether it is safe to present the actual password to the user, and controls said appropriate one of 
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the applications to present the actual password in a non-obfuscated format when it is determined 
to be safe to present the actual password. 

Chun et al. teaches wherein the current context is for filling in a password-changing 
computer form, and the retrieved meta data comprises a user identification and a password, and 
wherein the data repository module controls said appropriate one of the applications to present to 
the user the password in an obfuscated format, determines whether it is safe to present the actual 
password to the user, and controls said appropriate one of the applications to present the actual 
password in a non-obfuscated format when it is determined to be safe to present the actual 
password (see page 5, paragraph 0050). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Chun et al. 
because the teachings would give the user the ability to change passwords and retrieve forgotten 
passwords (see Chun et al. , page 5, paragraph 0050). 

19. Claim 84 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick (U.S. 
patent No. 5,710,884) in view of Arlein et al. (U.S.- patent No. 2002/0133500 Al), in further 
view of "Net Security Standard from the Open Group Brings the Realization of High- Value E- 
Commerce for Everyone a Step Further" as applied to claims 26, 53, 58, 65-66, 72, 75-76, and 
81 above, and further in view of Urn (U.S. patent No. 6,728,843 Bl). 



As to claim 84, Dedrick as modified, still does not teach wherein the data repository 
module resides on a proxy machine accessible through a predetermined connection means. 
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Lim teaches integrating authentication and authorization mechanisms into an application 
access control system (see abstract) in which he teaches wherein the data repository module 
resides on a proxy machine accessible through a predetermined connection means (see column 8, 
lines 46-58). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified above, by the teachings of Lim 
because the teachings would access to remote servers through a common API (see Lim . column 
7, lines 34-44). 

Allowable Subject Matter 

20. Claims 25, 52, 80, and 88-90 are allowed. 

Response to Arguments 

21 . Applicant's arguments filed 21-July-2005 have been fully considered but they are moot in 
view of the new grounds of rejection. 

Conclusion 

22. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jacob F. Betit whose telephone number is (571) 272-4075. The 
examiner can normally be reached on Monday through Friday 9 am to 5 pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Charles Rones can be reached on (571) 272-4085. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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